Skip to content

build(deps): clear UI dependency alerts - #3100

Merged
SamMorrowDrums merged 1 commit into
mainfrom
sammorrowdrums-clear-ui-dependency-alerts
Aug 19, 2026
Merged

build(deps): clear UI dependency alerts#3100
SamMorrowDrums merged 1 commit into
mainfrom
sammorrowdrums-clear-ui-dependency-alerts

Conversation

@SamMorrowDrums

Copy link
Copy Markdown
Collaborator

Summary

  • resolve runtime Dependabot alerts 66, 68, 69, 70, 71, and 75 by refreshing the transitive Hono, @hono/node-server, and fast-uri resolutions
  • resolve build-time alert 74 by refreshing postcss; the lock refresh also brings in the patched nanoid release reported by npm audit
  • keep this lockfile-only: @modelcontextprotocol/sdk@1.30.0 already permits @hono/node-server ^1.19.9 || ^2.0.5 and hono ^4.11.4, and @hono/node-server@2.1.1 accepts hono ^4

PR #3007's merged diff updated the MCP SDK and ip-address, but did not contain its advertised Hono resolution. This refresh preserves those updates and resolves the current graph without reintroducing older dependency state.

Validation

  • npm ci
  • npm audit --json and npm audit --omit=dev --json (zero findings)
  • npm run typecheck and npm run build
  • repeated production builds and a build from the pre-fix lockfile produced byte-identical static HTML
  • script/lint, script/test, and script/licenses-check
  • Docker build and container --help smoke test

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@SamMorrowDrums
SamMorrowDrums requested a review from a team as a code owner August 19, 2026 11:39
Copilot AI balanced review requested due to automatic review settings August 19, 2026 11:39

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)
  • ui/package-lock.json: Generated file

@SamMorrowDrums
SamMorrowDrums merged commit c54cd63 into main Aug 19, 2026
19 checks passed
@SamMorrowDrums
SamMorrowDrums deleted the sammorrowdrums-clear-ui-dependency-alerts branch August 19, 2026 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants